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IN THE CLAIMS 

Please cancel ^aims 18 and 51, amend claims 1 and 17, and add new claims 52 and 53 as 

follows: 

1 , (CURRENTLY AMENDED) A method of storing program material in a media 
storage device communicatively coupled to a receiver for subsequent replay, comprising the steps of: 

(a) accepting encrypted access conttol information and the program material encrypted 
according to a first encryption key in the receiver, the access control information including a first 
encryption key and control data; 

(b) decrypting the received access control information in a conditional access module 
relcasably coupleablc with the receiver to produce the first encryption key; 

(c) decrypting the program material in the receiver using the first encryption key; 

(d) re-encrypting the program material according to a second encryption key; 

(e) encrypting the second encryption key in the conditional access module according to 
a third encryption key to produce a fourth encryption key; and 

(£) providing the re-encrypted program material and the fourth encryption key for 
storage external to the conditioned access module . 

2. (ORIGINAL) The method of claim 1, wherein the encrypted access control 
information further comprises temporally-variant control data, and the method further comprises 
the steps of: 

decrypting the received access control information to produce die temporally-variant control 
data; and 

modifying the temporally variant control data to generate temporally-invariant control data. 

3. (CANCELED) 

4, (PREVIOUSLY PRESENTED) The method of claim 1, wherein the conditional 
access module is implemented on a smartcaxd. 
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5. (ORIGINAL) The method of claim 1 , wherein the access control information 
further comprises metadata describing at least one light for the program material. 

6. (ORIGINAL) The method of claim 5, further comprising the step of: 
generating the second encryption key at least in part from the metadata. 

7. (ORIGINAL) The method of claim 1 , wherein steps (b)-(f) are performed in 
response to a pre-buy message. 

8. (ORIGINAL) The method of claim 7, wherein the access control information 
further comprises metadata describing at least one right for the program material, and the method 
further comprises the step of: 

generating replay right data from the metadata. 

9. (ORIGINAL) The method of claim 8, wherein the replay right data is further 
generated from pre-buy data. 

10. (ORIGINAL) The method of claim 1, further comprising the steps of: 
retrieving the stored re-encrypted program material and the fourth encryption key; 
decrypting the fourth encryption key using the third encryption key to produce the second 

encryption key; and 

decrypting the re-encrypted material using the second encryption key. 

1 1 . (ORIGINAL) The method of claim 10, wherein the step of decrypting the fourth 
encryption key using the third encryption key to produce the second encryption key is performed in 
response to a subscriber request to access the program material. 
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1 2. (ORIGINAL) The method of claim 1 1 B wherein the access control information 
further comprises metadata describing at lease one right for the program material, the subscriber 
requesr to access the program material comprises buy data, and the method further comprises the 
steps of: 

generating replay tight data from the metadata; 
accepting the buy data; 

comparing the buy data with the replay tight data; and 

decrypting the fourth encryption key using the third encryption key to produce the second 
encryption key according to the comparison between the buy data and the replay right data. 

1 3. (ORIGINAL) The method of claim 12, wherein steps (b)-(f> axe performed in 
response to a pre-buy message, and wherein: 

the second encryption key and the third encryption key axe stored in a smartcard, and the 
replay right data is generated from the metadata and the pre-buy message in the smartcard; and 

the steps of accepting the buy data, comparing the buy data with the replay tight data, and 
decrypting the fourth encryption key using the third encryption key to produce the second 
encryption key according to the comparison between the buy data and the replay right data are 
performed in the smartcard. 

1 4. (ORIGINAL) The method of claim 1 , wherein the re-encrypted program material 
and the fourth encryption key ate scored on a media storage device. 

15. (ORIGINAL) The method of claim 1, wherein the control data is temporally- 
variant. 

16. (ORIGINAL) The method of claim 15, wherein the temporally-variant control data 
associates an expiration time with the program material. 
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1 7. (CURRENTLY AMENDED) An apparatus for storing program material encrypted 
according to a fitst encryption key for replay, comprising: 

a conditional access module, for accepting encrypted access control information including 
the first encryption key and temporally-variant control data, the control access module comprising: 

a first decryption module, for decrypting the access control information to produce 
the first encryption key; 

a first encryption module, for encrypting a second encryption key with a third 
encryption key to produce a fourth encryption key; and 

a second decryption module for decrypting the fourth encryption key to produce the 
second encryption key[[,fl; 

wherein the conditional access module is releasab ly communicatively coupled to a tuner, the 
tuner to enable reception of the enc r ypted access control information and the program matgrtel 
encrypted according to a first encryption key, the tuner comprising 

a rViirH fW-ryption module, for decrypting the program material using the first 
encryption kev produced by the conditional access module: 

a second encryption mo dule, for re-encrypting the decrypted program material 
according jo the second encryption kev: and 

a fourth decryption module^ for decrypting the re-en crypted program material 
according to the second encryption kev, 

18. (CANCELED) 

19. (PREVIOUSLY PRESENTED) The apparatus of claim 17, wherein the conditional 
access module further comprises: 

a pte-buy module, for controlling the first decryption module. 

20. (PREVIOUSLY PRESENTED) The apparatus of claim 17, wherein the access 
control information further comprises metadata describing at least one right for the program 
material. 
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21. (PREVIOUSLY PRESENTED) The apparatus of claim 20, wherein: 

the conditional access module comprises a pre-buy module for controlling the first 
decryption module, and for generating replay right data from the tnetadata. 

22. (ORIGINAL) The apparatus of claim 21, further comprising a buy module, 
communicatively coupled to the pre-buy module. 

23. (ORIGINAL) The apparatus of claim 22, wherein the buy module comprises: 

a purchase module for accepting buy data and comparing the buy data and the replay right 
data from the pre-buy module; and 

a control module for controlling the second decryption module based on the comparison 
between the buy data and the replay right data, 

24. (ORIGINAL) The apparatus of claim 23, further comprising a billing module, for 
recording the buy data. 

25. (ORIGINAL) The apparatus of claim 18, wherein the second encryption key is 
stored in die conditional access module. 

26. (ORIGINAL) The apparatus of claim 1 8, wherein the third encryption key is stored 
in the conditional access module. 

27. (ORIGINAL) The apparatus of claim 17, wherein the conditional access module is 
releaseably communicative coupleable to: 

a tuner for receiving the encrypted access control information and the program material 
encrypted according to a first encryption key; 

a third decryption module, for decrypting the program material using the first encryption key 
from the conditional access module 

a second encryption module, for re-encrypting the decrypted program material according to 
the key; and 

a media storage device, 
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28. (PREVIOUSLY PRESENTED) An apparatus fox storing progtam material in a 
media stotage device comnninicatively coupled to a receiver for replay, comprising: 

a receiver, for accepting encrypted access control information and trie program material 
encrypted according to a first encryption key, the access control information including a first 
encryption key and control data; 

a conditional access module, releasably coupkable with the receiver for decrypting the 
received access control information to produce the first encryption key; 

means for decrypting the progtam material using the first encryption key; 

means for xc-encrypring the program material using according to a second encryption key; 

means, in the conditional access module, for encrypting the second encryption key according 
to a third encryption key to produce a fourth encryption key; and 

means for providing die re-encrypted program material and a fourth encryption key for 

storage. 

29. (ORIGINAL) The apparatus of claim 28, wherein the encrypted access control 
informarion further comprises temporally-variant control data, and the apparatus further comprises: 

means for decrypting the received access control information to produce the temporally- 
variant control data; and 

means for modifying the temporally variant control data to generate temporary-invariant 
control data. 

30. (CANCELED) 

3 1 . (PREVIOUSLY PRESENTED) The apparatus of claim 28, wherein the conditional 
access module is implemented on a smartcard. 

32. (ORIGINAL) The apparatus of claim 28, wherein the access control informarion 
further comprises metadata describing at least one right for the program material. 

-10- 
PAGE 1 1/28 * RCVD AT 10/26/2007 7:56:43 PM [Eastern Daylight Timel * SVR:USPTO£FXRF-2/2 * DNIS:2738300 * CSID:3109640941 * DURATION (mm-ss):07-48 



10/26/2007 16:59 FAX 3109640941 DIRECTV PATENTS @ 0 12/028 

Serial No. 09/620,772 PD-200045 

33. (ORIGINAL) The apparatus of claim 32, further comprising: 

means for generating the second encryption key at least in part from the metadata. 

34. (ORIGINAL) The apparatus of claim 32, further comprising: 
means for generating replay right data from the metadata. 

35. (ORIGINAL) The apparatus of claim 34, wherein the means for generating the 
replay right data further generates replay right data from pre-buy data. 

36. (PREVIOUSLY PRESENTED) The apparatus of claim 28, further comprising: 
means for retrieving the stored re-encrypted program material and the fourth encryption key; 
means for decrypting the fourth encryption key using the third encryption key to produce 

the second encryption key; and 

means for decrypting the re-encrypted material using the second encryption key. 

37. (ORIGINAL) The apparatus of claim 36, wherein the means for decrypting the 
fourth encryption key using the third encryption key to produce the second encryption key is 
performed in response to a subscriber request to access the program material. 

38. (ORIGINAL) The apparatus of claim 37, wherein the access control information 
further comprises metadata describing at least one right for the program material, the subscriber 
request to access the program material comprises buy data, and the apparatus further comprises: 

means for generating replay right data from the metadata; 
means for accepting the buy data; 

means for comparing the buy data with the replay right data; and 

means for decrypting the fourth encryption key using the third encryption key to produce 
the second encryption key according to the comparison between the buy data and the replay right 
data. 
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39. (ORIGINAL) The apparatus of claim 38, wherein: 

the second encryption key and the third encryption key ate stored in a smartcard, and the 
replay right data is generated from the metadata and the pre-buy message in the smartcard; and 

the means for accepting the buy data, means for comparing the buy data with the tcplay 
right data, and means for decrypting the fourth encryption key using the third encryption key to 
produce the second encryption key according to the comparison between the buy data and the 
replay right data is implemented in the smartcard. 

40. (ORIGINAL) The apparatus of claim 28, wherein the re-encrypted program 
material and the fourth encryption key are stored on a media storage device. 

41 . (ORIGINAL) The apparatus of claim 28, wherein the control data is temporally- 

variant. 

42. (ORIGINAL) The apparatus of claim 41, wherein the temporally-variant control 
data associates an expiration time with the program material. 

43. (PREVIOUSLY PRESENTED) The method of claim 1, further comprising the 
step of generating the second encryption key in the conditional access module. 

44. (PREVIOUSLY PRESENTED) The method of claim 1, wherein the access control 
information further comprises metadata and the method further comprises the step of generating 
the second encryption key at least in part from the metadata. 

45. (PREVIOUSLY PRESENTED) The method of claim 1, further comprising the 

step of: 

augmenting the second encryption key with at least a portion of the metadata before 
encrypting the second encryption key in the conditional access module. 
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46. (PREVIOUSLY PRESENTED) The method of claim 1, wherein the access control 
information further comprises metadata describing at least one right for the program material, and 
the method further comprises the step of: 

augmenting the second encryption key with at least a portion of the metadata before 
encrypting the second encryption key in the conditional access module. 

47. (PREVIOUSLY PRESENTED) The apparatus of claim 20, wherein the conditional 
access module generates the second encryption key at least in part from the metadata. 

48. (PREVIOUSLY PRESENTED) The apparatus of claim 17, wherein the access 
control information further comprises metadata and the conditional access module generates the 
second encryption key at least in part from the metadata. 

49. (PREVIOUSLY PRESENTED) The apparatus of claim 20, wherein the conditional 
access module augments the second encryption key with at least a portion of the metadata before 
encrypting the second encryption key in the conditional access module. 

50. (PREVIOUSLY PRESENTED) The apparatus of claim 17, wherein the access 
control information further comprises metadata, and wherein the conditional access module 
augments the second encryption key with at least a portion of che metadata before encrypting the 
second encryption key in the conditional access module. 

51. (CANCELED) 

52. (NEW) The method of claim 1, wherein the second encryption key is scored in the 
conditional access module. 

53. (NEW) The apparatus of claim 28, wherein the second encryption key is stored in the 
conditional access module. 
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